Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docker image HQ_VERIFY_CERTS env not working #531

Open
hariom282538 opened this issue Dec 22, 2020 · 0 comments
Open

docker image HQ_VERIFY_CERTS env not working #531

hariom282538 opened this issue Dec 22, 2020 · 0 comments

Comments

@hariom282538
Copy link

hariom282538 commented Dec 22, 2020

General information

  • docker:
  • latest:
  • es version 7.5.1:
  • docker-image:
  • chrome Version 87.0.4280.88 (Official Build) (x86_64)
  • ** just fyi es size ~30TB**

Issue Description

ElasticHQ(not on ssl) not working with elasticsearch basicAuth+selfSignedSSLCert.
docker run -p 5000:5000 -e HQ_VERIFY_CERTS=False elastichq/elasticsearch-hq:latest
docker run -p 5000:5000 -e HQ_VERIFY_CERTS=False elastichq/elasticsearch-hq:release-v3.5.12

Source Code / Logs

`
None
None
2020-12-23 09:08:18,382 INFO elastichq ConnectionService.create_connection:60 Verify: False
2020-12-23 09:08:18,383 INFO elastichq ConnectionService.create_connection:61 Cert File: None
2020-12-23 09:08:18,383 INFO elastichq ConnectionService.create_connection:93 Basic Auth is False
2020-12-23 09:08:18,384 INFO elastichq ConnectionService.create_connection:105 SSL disabled
config settings.json not found, searched /etc/elastic-hq/settings.json,~/settings.json,/src/settings.json,/src/elastichq/settings.json,/src/elastichq/config/settings.json
--- Logging error ---
Traceback (most recent call last):
File "/usr/local/lib/python3.6/site-packages/urllib3/connectionpool.py", line 601, in urlopen
chunked=chunked)
File "/usr/local/lib/python3.6/site-packages/urllib3/connectionpool.py", line 346, in _make_request
self._validate_conn(conn)
File "/usr/local/lib/python3.6/site-packages/urllib3/connectionpool.py", line 850, in validate_conn
conn.connect()
File "/usr/local/lib/python3.6/site-packages/urllib3/connection.py", line 326, in connect
ssl_context=context)
File "/usr/local/lib/python3.6/site-packages/urllib3/util/ssl
.py", line 329, in ssl_wrap_socket
return context.wrap_socket(sock, server_hostname=server_hostname)
File "/usr/local/lib/python3.6/site-packages/eventlet/green/ssl.py", line 438, in wrap_socket
return GreenSSLSocket(sock, *a, _context=self, **kw)
File "/usr/local/lib/python3.6/site-packages/eventlet/green/ssl.py", line 128, in init
self.do_handshake()
File "/usr/local/lib/python3.6/site-packages/eventlet/green/ssl.py", line 301, in do_handshake
super(GreenSSLSocket, self).do_handshake)
File "/usr/local/lib/python3.6/site-packages/eventlet/green/ssl.py", line 150, in _call_trampolining
return func(*a, **kw)
File "/usr/local/lib/python3.6/ssl.py", line 1077, in do_handshake
self._sslobj.do_handshake()
File "/usr/local/lib/python3.6/ssl.py", line 689, in do_handshake
self._sslobj.do_handshake()
ssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:852)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/usr/local/lib/python3.6/site-packages/requests/adapters.py", line 449, in send
timeout=timeout
File "/usr/local/lib/python3.6/site-packages/urllib3/connectionpool.py", line 639, in urlopen
_stacktrace=sys.exc_info()[2])
File "/usr/local/lib/python3.6/site-packages/urllib3/util/retry.py", line 388, in increment
raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='10.25.19.201', port=9200): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:852)'),))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/src/elastichq/service/ConnectionService.py", line 106, in create_connection
response = requests.get(scheme + "://" + ip + ":" + port, timeout=REQUEST_TIMEOUT)
File "/usr/local/lib/python3.6/site-packages/requests/api.py", line 75, in get
return request('get', url, params=params, **kwargs)
File "/usr/local/lib/python3.6/site-packages/requests/api.py", line 60, in request
return session.request(method=method, url=url, **kwargs)
File "/usr/local/lib/python3.6/site-packages/requests/sessions.py", line 533, in request
resp = self.send(prep, **send_kwargs)
File "/usr/local/lib/python3.6/site-packages/requests/sessions.py", line 646, in send
r = adapter.send(request, **kwargs)
File "/usr/local/lib/python3.6/site-packages/requests/adapters.py", line 514, in send
raise SSLError(e, request=request)
requests.exceptions.SSLError: HTTPSConnectionPool(host='10.25.19.201', port=9200): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:852)'),))

`

@hariom282538 hariom282538 changed the title docker image not working docker image HQ_VERIFY_CERTS env not working Dec 23, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant